@juspay/neurolink 9.86.3 → 9.86.5

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+## [9.86.5](https://github.com/juspay/neurolink/compare/v9.86.4...v9.86.5) (2026-07-14)
+
+### Bug Fixes
+
+- **(proxy):** harden routing and process reliability ([be7487c](https://github.com/juspay/neurolink/commit/be7487cec6870176dfbcac3ed8b547a36bcc887a))
+
+## [9.86.4](https://github.com/juspay/neurolink/compare/v9.86.3...v9.86.4) (2026-07-11)
+
+### Bug Fixes
+
+- **(generate):** stop treating ai@6 raw-text output echo as parsed schema output ([dc23936](https://github.com/juspay/neurolink/commit/dc23936d1feec5e4089ba5eb8338983b5a7ceee3))
+
 ## [9.86.3](https://github.com/juspay/neurolink/compare/v9.86.2...v9.86.3) (2026-07-11)
 
 ### Bug Fixes

package/dist/auth/tokenStore.d.ts

@@ -171,6 +171,10 @@ export declare class TokenStore {
      * round-trips. The state survives proxy restarts because it is stored
      * alongside the tokens in the JSON file.
      *
+     * This operation and saveTokens() share the instance mutex. A concurrent
+     * save cannot erase a disable: a later disable wins, while a later save
+     * preserves the existing disabled metadata.
+     *
      * @param provider - The provider key (e.g., "anthropic:user@example.com")
      * @param reason - Optional human-readable reason (e.g., "refresh_failed")
      */
@@ -194,6 +198,8 @@ export declare class TokenStore {
      * @returns true if the provider entry exists and is disabled
      */
     isDisabled(provider: string): Promise<boolean>;
+    /** Return the persisted disable reason, if the provider is disabled. */
+    getDisabledReason(provider: string): Promise<string | undefined>;
     /**
      * Lists all provider keys that are currently disabled.
      *

package/dist/auth/tokenStore.js

@@ -146,13 +146,23 @@ export class TokenStore {
                 throw error;
             }
         }
-        // Update provider tokens
+        const existingProvider = storageData.providers[provider];
+        const now = Date.now();
+        // Token rotation must not silently clear an operator-disabled account.
+        // Explicit login calls markEnabled() after saving fresh credentials.
         storageData.providers[provider] = {
             tokens,
-            createdAt: Date.now(),
-            lastAccessed: Date.now(),
+            createdAt: existingProvider?.createdAt ?? now,
+            lastAccessed: now,
+            ...(existingProvider?.disabled === true
+                ? {
+                    disabled: true,
+                    disabledAt: existingProvider.disabledAt,
+                    disabledReason: existingProvider.disabledReason,
+                }
+                : {}),
         };
-        storageData.lastModified = Date.now();
+        storageData.lastModified = now;
         try {
             const content = this.encryptionEnabled
                 ? this.obfuscate(JSON.stringify(storageData))
@@ -489,6 +499,10 @@ export class TokenStore {
      * round-trips. The state survives proxy restarts because it is stored
      * alongside the tokens in the JSON file.
      *
+     * This operation and saveTokens() share the instance mutex. A concurrent
+     * save cannot erase a disable: a later disable wins, while a later save
+     * preserves the existing disabled metadata.
+     *
      * @param provider - The provider key (e.g., "anthropic:user@example.com")
      * @param reason - Optional human-readable reason (e.g., "refresh_failed")
      */
@@ -587,6 +601,24 @@ export class TokenStore {
             }
         });
     }
+    /** Return the persisted disable reason, if the provider is disabled. */
+    async getDisabledReason(provider) {
+        return this._mutex.runExclusive(async () => {
+            try {
+                const storageData = await this.loadStorageData();
+                const providerData = storageData.providers[provider];
+                return providerData?.disabled === true
+                    ? providerData.disabledReason
+                    : undefined;
+            }
+            catch (error) {
+                if (error instanceof TokenStoreError && error.code === "NOT_FOUND") {
+                    return undefined;
+                }
+                throw error;
+            }
+        });
+    }
     /**
      * Lists all provider keys that are currently disabled.
      *